Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier: 7n10zzyiB3WW1byjq4LLr81C4tfCq9hULHAIiEFIrQ8=
Subject key identifier: 79:9C:62:F6:1D:2D:8A:B2:E2:FD:93:B2:5E:FB:10:67:99:E5:98:DD
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial: 0196561385A10F8F0E7A013ED62D4831E43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number: 11D9
Signing time: Mon 21 Apr 2025 02:00:42 +0000
Manifest this update: Mon 21 Apr 2025 02:00:42 +0000
Manifest next update: Tue 22 Apr 2025 02:00:42 +0000
Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: vTCnWCegHyIgmtn4NaQzei3YJctUSD8K4edhztB+50A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:85:a1:0f:8f:0e:7a:01:3e:d6:2d:48:31:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Validity
Not Before: Apr 21 02:00:42 2025 GMT
Not After : Apr 22 02:00:42 2025 GMT
Subject: CN=799c62f61d2d8ab2e2fd93b25efb106799e598dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:0f:fa:27:90:af:69:e2:3b:0d:a8:80:d5:
14:1a:90:75:0c:00:8a:94:e6:78:3e:49:8d:34:d7:
ce:bd:55:1e:92:6b:34:9e:bb:11:78:94:ba:b1:de:
db:bb:94:47:2f:2f:d2:f3:cf:6b:5f:21:cf:11:ed:
6e:c5:1d:44:fc:aa:92:dd:c2:cb:3d:90:01:38:a4:
7b:fb:71:07:82:be:19:57:89:6a:0f:f5:5d:df:43:
9d:83:7a:51:f6:43:fb:73:b9:c3:f9:3f:16:d3:76:
76:6d:b0:fc:27:ce:cc:b7:75:1f:61:0b:59:28:6d:
b2:21:e5:c9:28:6c:86:4a:a7:0d:97:28:5a:30:bd:
5d:79:00:c9:c5:9b:a0:d8:f9:7a:d3:a5:50:58:8a:
cc:0e:b9:95:0f:73:bf:45:8e:af:5a:d8:ef:a0:36:
6d:4e:1b:49:b7:11:0f:00:c1:bc:80:44:cd:b0:82:
5f:85:6e:9d:30:36:8d:d9:a3:70:f8:54:43:8b:13:
11:15:e3:10:e0:47:bc:69:7f:9d:86:4b:4a:ef:93:
5a:95:d5:69:7e:42:a7:30:c2:9c:eb:79:ff:3e:d5:
a6:7d:56:e4:f5:61:c0:07:c8:10:77:1e:59:da:47:
74:0c:d4:fc:1d:19:6a:48:6f:13:bd:ca:20:16:80:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9C:62:F6:1D:2D:8A:B2:E2:FD:93:B2:5E:FB:10:67:99:E5:98:DD
X509v3 Authority Key Identifier:
keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a7:3b:10:64:27:f1:06:bf:37:de:3d:4e:4e:e5:d8:3a:f2:
83:55:06:7a:3d:a8:cc:f1:95:c2:7f:42:8e:41:86:59:31:28:
36:12:40:23:ab:c9:0f:0a:56:bb:82:cc:ea:29:b9:6f:b7:af:
25:a1:8c:24:4d:b4:9c:d8:99:d9:e1:ff:2b:bc:66:6f:82:b8:
d4:de:9a:a8:31:e6:b3:8c:e9:22:d3:7a:82:c4:74:73:68:19:
98:90:3f:93:9a:cf:dd:15:d0:04:3e:ac:3a:81:b5:9d:b3:65:
52:11:31:06:76:c8:1b:19:7d:1b:c4:e1:ad:9a:66:da:f8:ad:
7b:20:1f:ee:79:01:84:ed:f3:d3:86:5a:b9:38:47:b3:cc:be:
88:88:20:0b:3c:93:dd:d6:81:1f:55:0d:84:c8:d2:bb:3e:86:
04:c8:ef:7f:ca:ea:c3:a1:07:9b:7c:4f:ae:2e:ce:c1:af:9b:
7c:71:b0:67:bc:cb:22:42:8c:be:eb:ee:74:2b:44:05:6e:eb:
3e:19:5b:a2:a4:dc:79:7e:59:65:a6:a3:2a:60:90:01:0a:c2:
bf:e3:0b:c4:ad:dd:a5:3c:6e:65:ba:ff:d4:d0:25:ce:7b:3b:
f8:95:fa:ec:54:6e:d3:9a:d4:7b:f8:9b:1b:35:9b:5e:c4:f5:
72:7d:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:13 2025 by rpki-client